[nsp-sec] DOS towards 212.181.112.29
Rob Thomas
robt at cymru.com
Fri Mar 28 15:31:16 EDT 2008
Hi, team.
> Might want to check for flows to 212.181.112.29
Someone was using this IP to access IRC, and that same person made a
crew of miscreants very unhappy. The result was packet love. We see at
least one attack beginning at 2008-03-27 23:09:37.074659 UTC, with the
host being wiped out no later than 2008-03-27 23:16:55.169279 UTC.
Thanks,
Rob.
--
Rob Thomas
Team Cymru
http://www.team-cymru.org/
ASSERT(coffee != empty);
More information about the nsp-security
mailing list